Cyberattack on environment watchdog pinned on organised crime group
Investigators praise Scottish regulator for openness
Credit: Adobe Stock
An international serious organised crime group was behind a cyberattack on the Scottish Environment Protection Agency late last year, Police Scotland has concluded.
The hack saw more than 4,000 digital files stolen from the regulator. An independent audit said the attack “displayed significant stealth and malicious sophistication”.
A second hacking attempt was also made in a bid to sabotage SEPA’s attempt to fix the problems caused by the first. The audit also found that while SEPA had “sophisticated defence and detection mechanisms”, two of its backups had been affected by the hack.
Chief executive Terry A’Hearn said: “The audits make it clear we were well protected but that no cybersecurity regime can be 100% secure. A number of learnings have been identified that will help SEPA further improve its cybersecurity. All have been accepted.”
- ‘Cyberattackers are doing the same things over and over – and too often getting through’
- How secure is government and should we have a right to know?
- DHSC signs £2m six-month deal to improve ability to ‘respond to recover from a cyberattack’
The ransomware attack was detected at shortly after midnight on Christmas Eve last year.
Some of the stolen information was published online, including business and staff details.
The environment watchdog did not respond to the ransom request.
Detective inspector Michael McCullagh said: “Recent attacks against SEPA, the Irish Health Service and wider public, private and third sector organisations are a reminder of growing threat of international cybercrime and that no system can be 100% secure. They’re also a reminder of the growing importance of organisations being ready, resilient, and responsive. SEPA’s work in standing up to, and speaking openly about international serious and organised cybercrime, shows real leadership.”
Share this page
CONTRIBUTIONS FROM READERS
Please login to post a comment or register for a free account.
Parliamentary committee laments pace of progress so far in changing rules
Cabinet Office claims that ‘vast majority of compatible phones’ received test message
NCDS is currently engaged in ‘moving towards new ways of working’ to reflect legislative changes
Minister reveals up more than £4m spent on testing, security and other support contracts
Related Sponsored Articles
The traditional reactive approach to cybersecurity, which involves responding to attacks after they have occurred, is no longer sufficient. Murielle Gonzalez reports on a webinar looking at...